ZDI-26-189
HIGH 8.2
Published
Mar 16, 2026
VMware ESXi VMXNET3 Integer Overflow Local Privilege Escalation Vulnerability
VMware
VMware ESXi contains a privilege escalation vulnerability (CVE-2025-41236) with a CVSS score of 8.2 that allows attackers with high-privileged code execution on guest systems to escalate their privileges further on the host. Organizations running VMware ESXi should prioritize patching this vulnerability and review access controls to restrict which users can execute high-privileged code on guest systems. Security teams should monitor for any suspicious privilege escalation attempts and apply vendor patches as soon as they become available.